CVE-2026-73500
HighAdvisory
Published 24 Jul 2026In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 8.7
- base score, highest
- EPSS
- 0.004
- 33rd percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 586
- of 17,787 indexed, latest versions
- Container images
- 552
- deployed by those charts
- Fix available
- 3 of 3
- affected packages
etcd: `tlsListener.acceptLoop` spawns unbounded handshake goroutines with no deadline
Carried by container images the latest versions of 586 of 17,787 indexed charts deploy, on 552 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| etcdbitnami | 3.5.7-0, 3.6.1-1, 3.6.4-0 | 3.5.33 | 4 |
| go.etcd.io/ | v3.3.0-rc.0.0.20200707003333-58bb8ae09f8e | 3.5.33 | 4 |
| go.etcd.io/ | v3.0.0-20210928084031-3df272774672, v3.5.0, v3.5.1, v3.5.2+33 more | 3.5.33 | 544 |
Charts affected
586 by stars
Container images carrying it
552 by charts deploying them
A fixed version is listed for 3 of the 3 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| minio/ | 14cea493d9a3 | go.etcd.io/ | 3.5.33 | 16 |
| grafana/ | f772d434e8fa | go.etcd.io/ | 3.5.33 | 12 |
| registry.k8s.io/ | a4b0b1a37605 | go.etcd.io/ | 3.5.33 | 10 |
| quay.io/ | 1dce27c494a1 | go.etcd.io/ | 3.5.33 | 8 |
| grafana/ | 3600073f45a9 | go.etcd.io/ | 3.5.33 | 7 |
| minio/ | a7fe349ef4bd | go.etcd.io/ | 3.5.33 | 7 |
| ghcr.io/ | 76d28575b71c | go.etcd.io/ | 3.5.33 | 7 |
| quay.io/ | 993e8c454a7e | go.etcd.io/ | 3.5.33 | 7 |
| registry.k8s.io/ | 589e525cddef | go.etcd.io/ | 3.5.33 | 7 |
| ghcr.io/ | 3ccc56791c8a | go.etcd.io/ | 3.5.33 | 6 |
| quay.io/ | 2e4c14d1b444 | go.etcd.io/ | 3.5.33 | 6 |
| registry.k8s.io/ | b9dc9a714a48 | go.etcd.io/ | 3.5.33 | 6 |
| quay.io/ | 9f21034731c7 | go.etcd.io/ | 3.5.33 | 5 |
| registry.k8s.io/ | b74b05b39501 | go.etcd.io/ | 3.5.33 | 5 |
| registry.k8s.io/ | 6be9f63ca4ca | go.etcd.io/ | 3.5.33 | 5 |
| registry.k8s.io/ | a2d40c1c3ccb | go.etcd.io/ | 3.5.33 | 5 |
| registry.k8s.io/ | ea1d25e23479 | go.etcd.io/ | 3.5.33 | 5 |
| registry.k8s.io/ | 42af0929bcd6 | go.etcd.io/ | 3.5.33 | 5 |
| registry.k8s.io/ | da081c27e8a6 | go.etcd.io/ | 3.5.33 | 5 |
| grafana/ | 121a7a9ece6d | go.etcd.io/ | 3.5.33 | 4 |
| grafana/ | 1ee60f980950 | go.etcd.io/ | 3.5.33 | 4 |
| grafana/ | 3c8fd3570dd9 | go.etcd.io/ | 3.5.33 | 4 |
| grafana/ | 65a578975943 | go.etcd.io/ | 3.5.33 | 4 |
| rancher/ | 5f6c4dc52a05 | go.etcd.io/ | 3.5.33 | 4 |
| ghcr.io/ | 93fa0daf603c | go.etcd.io/ | 3.5.33 | 4 |
| ghcr.io/ | 5d1182ac21f0 | go.etcd.io/ | 3.5.33 | 4 |
| ghcr.io/ | 9506a6cb98d1 | go.etcd.io/ | 3.5.33 | 4 |
| ghcr.io/ | 6d4c9fe66e4f | go.etcd.io/ | 3.5.33 | 4 |
| ghcr.io/ | 824d6d78d451 | go.etcd.io/ | 3.5.33 | 4 |
| ghcr.io/ | f7dcade6523b | go.etcd.io/ | 3.5.33 | 4 |
| ghcr.io/ | ab2e1fa19dd4 | go.etcd.io/ | 3.5.33 | 4 |
| quay.io/ | 6b83f55bd99e | go.etcd.io/ | 3.5.33 | 4 |
| registry.k8s.io/ | d9862115e7c7 | go.etcd.io/ | 3.5.33 | 4 |
| registry.k8s.io/ | 932eae60e2bc | go.etcd.io/ | 3.5.33 | 4 |
| registry.k8s.io/ | 81e79f205083 | go.etcd.io/ | 3.5.33 | 4 |
| cloudpirates/ | 8dc02a7e5093 | go.etcd.io/ | 3.5.33 | 3 |
| envoyproxy/ | 156b7d32c73b | go.etcd.io/ | 3.5.33 | 3 |
| grafana/ | 0dc5a246ab16 | go.etcd.io/ | 3.5.33 | 3 |
| grafana/ | 7cb8c64c4d57 | go.etcd.io/ | 3.5.33 | 3 |
| grafana/ | a0f881232a6f | go.etcd.io/ | 3.5.33 | 3 |
| grafana/ | 58a6c186ce78 | go.etcd.io/ | 3.5.33 | 3 |
| grafana/ | 0dac7d5cb383 | go.etcd.io/ | 3.5.33 | 3 |
| grafana/ | 626900031c4e | go.etcd.io/ | 3.5.33 | 3 |
| tykio/ | 0e03b94c153d | go.etcd.io/ | 3.5.33 | 3 |
| tykio/ | 3e907e675bf9 | go.etcd.io/ | 3.5.33 | 3 |
| ghcr.io/ | 8499afd690c4 | go.etcd.io/ | 3.5.33 | 3 |
| ghcr.io/ | c8e042b5cee8 | go.etcd.io/ | 3.5.33 | 3 |
| ghcr.io/ | 66664ba563e7 | go.etcd.io/ | 3.5.33 | 3 |
| ghcr.io/ | 5a878e4e4f03 | go.etcd.io/ | 3.5.33 | 3 |
| ghcr.io/ | 28c5ff40963f | go.etcd.io/ | 3.5.33 | 3 |